in32 Perl mailing list
Date: 04/17/2014 01:26 PM
Subject:Re: StrawberryPerl and the OpenSSL "heartbleed" bug
I have my own local directories that cpanp knows about. I'm going to try
and put Math-Pari-2.01080605_patched.tar.gz in one of them and see if I
cannot coax cpan
On 17.4.2014 19:26, matthew.pers...@lazard.com wrote:
I have my own local directories that cpanp knows about. I'm going to try
and put _Math-Pari-2.01080605_patched.tar.g_z in one of them and see if I
cannot coax cpanp to build locally. If not, Illl cpanm from your repo.
Can I assume that wh
patch
will be in the main distribution?
Thanks.
--
Matthew O. Persico
Lazard
30 Rockefeller Plaza
New York, NY 10112
212 632 6136
From: kmx
To: Win32 Perl mailing list
Date: 04/16/2014 05:21 PM
Subject: Re: StrawberryPerl and the OpenSSL "heartbleed" bug
Excell
Never mind. I'm getting lesdyxic in my old age.
Sent from my iPad
> On Apr 16, 2014, at 18:52, "Jan Dubois" wrote:
>
> On Wed, Apr 16, 2014 at 3:37 PM, wrote:
> >
> > Folks, I just ftped to the link below and found pari.2.7.0.tar.gz. Isn't
that
> > what we're looking for or am I missing somet
On Wed, Apr 16, 2014 at 3:37 PM, wrote:
>
> Folks, I just ftped to the link below and found pari.2.7.0.tar.gz. Isn't that
> what we're looking for or am I missing something?
>From http://cpansearch.perl.org/src/ILYAZ/Math-Pari-2.01080605/README:
> (2.01080* still fully supports only 2.1.7, but
Folks, I just ftped to the link below and found pari.2.7.0.tar.gz. Isn't that
what we're looking for or am I missing something?
Sent from my iPad
> On Apr 16, 2014, at 4:50 PM, "Jan Dubois" wrote:
>
> On Wed, Apr 16, 2014 at 1:46 PM, kmx wrote:
> > The reason is simple - it does not build anym
On Wed, Apr 16, 2014 at 2:35 PM, wrote:
> Suggestion - maybe you can pull the file that is being fetched (I assume its
> pari217.exe) and install it locally once and for all? If the pari lib is
> found locally, will the build bother to attempt to go out and get it?
It is pari-2.1.7.tgz, but yes
Lazard
30 Rockefeller Plaza
New York, NY 10112
212 632 6136
From: kmx
To: Win32 Perl mailing list
Date: 04/16/2014 05:21 PM
Subject:Re: StrawberryPerl and the OpenSSL "heartbleed" bug
Excellent, I have put patched version at
http://strawberryperl.com/package/kmx/pe
2014-04-16 15:04 GMT+02:00 Alexandr Ciornii :
> A specially created server (
> http://blog.meldium.com/home/2014/4/10/testing-for-reverse-heartbleed
> , in Russian: http://www.xakep.ru/post/62350/default.asp ) can send
> similar request to client. But such attack has low probability.
>
It is not
Excellent, I have put patched version at
http://strawberryperl.com/package/kmx/perl-modules-patched/Math-Pari-2.01080605_patched.tar.gz
Simply run:
cpanm
http://strawberryperl.com/package/kmx/perl-modules-patched/Math-Pari-2.01080605_patched.tar.gz
-v
--
kmx
On 16.4.2014 22:50, Jan Dubois
On Wed, Apr 16, 2014 at 1:46 PM, kmx wrote:
> The reason is simple - it does not build anymore as it is not able to find
> required pari source tarball at
> ftp://megrez.math.u-bordeaux.fr/pub/pari/unix/
Here is a quick-and-dirty patch to work around this (but hard-wires
you to 2.1.7):
--- a/uti
. Persico
Lazard
30 Rockefeller Plaza
New York, NY 10112
212 632 6136
From: kmx
To: win32-vanilla@perl.org
Date: 04/16/2014 01:31 AM
Subject: Re: StrawberryPerl and the OpenSSL "heartbleed" bug
---
Olivier,
You c
To: win32-vanilla@perl.org
Date: 04/16/2014 01:31 AM
Subject:Re: StrawberryPerl and the OpenSSL "heartbleed" bug
Olivier,
You can try updated strawberry perl from:
http://strawberryperl.com/download/5.18.2.2/strawberry-perl-5.18.2.2-32bit.msi
http://strawberryperl.co
A specially created server (
http://blog.meldium.com/home/2014/4/10/testing-for-reverse-heartbleed
, in Russian: http://www.xakep.ru/post/62350/default.asp ) can send
similar request to client. But such attack has low probability.
2014-04-16 15:40 GMT+03:00 :
> Does it matter if you are only usin
Does it matter if you are only using client-side SSL, if you are not running a
server with Strawberry but just connecting to sites?
--
Matthew
> On Apr 16, 2014, at 1:31, "kmx" wrote:
>
> Olivier,
>
> You can try updated strawberry perl from:
>
> http://strawberryperl.com/download/5.18.2.2/s
Olivier,
You can try updated strawberry perl from:
http://strawberryperl.com/download/5.18.2.2/strawberry-perl-5.18.2.2-32bit.msi
http://strawberryperl.com/download/5.18.2.2/strawberry-perl-5.18.2.2-64bit.msi
http://strawberryperl.com/download/5.18.2.2/strawberry-perl-5.18.2.2-32bit.zip
http://s
Hi,
you can get updated openssl binaries from:
- http://strawberryperl.com/package/kmx/64_libs/gcc47-2014Q1/
- http://strawberryperl.com/package/kmx/32_libs/gcc47-2014Q1/
I am considering releasing strawberry perl 5.18.2.2 (with new openssl)
before the end of April.
--
kmx
On 12.4.2014 20:45
Hi,
You have probably heard of the now famous "heartblead" bug of the OpenSSL
library.
http://heartbleed.com/
StrawberryPerl is bundled with a binary of the OpenSSL library so I'm
wondering if StrawberryPerl is affected by the bug.
I had a look at the release notes of StrawberryPerl to look for
18 matches
Mail list logo
